This is the same setup I’m running, I can highly recommend it.

Yes, unfortunately they need to atm.

I use KeePass with three factors:

• The password
• A keyfile I distribute out of band between all hosts that should be able to open the database
• A set of Hardware Keys supporting challange-response

Works really well IMO. I use KeePassXC on Linux and KeePass2Android on Android.

Try Invidious, FreeTube, NewPipe,… All allow you to watch regular youtube content without ads. You can also create instance local accounts to “create playlists” and “subscribe” to people.

FreeTube has built in SponsorBlock, you can tell it to automatically and seamlessly skip sections of videos, such as sponsors, self ads, intros, outros,…

I’ve started using SimpleX with a few privacy minded friends, we migrated our Group from Signal to SimpleX. The experience has been great so far!

What I don’t like about SimpleX is that it’s still missing proper Desktop/3rd Part Apps as far as I’m aware. Furthermore the whole project is still in it’s infancy.

Though it’s already usable day to day.

My plan moving forward with SimpleX is writing a nix-flake to build SimpleX Chat CLI on nix.